Skip to main content

Privacy

Receivo is operated by Draft Labs. This page explains what we store, why, who else handles it, and how to remove it.

Last updated 30 October 2026

In short

Receivo keeps only what it needs to track your invoices' legal due dates. We never ask for passwords, never take card or UPI details, and never sell your data. Delete an invoice and it is gone; ask us to delete your account and everything tied to it is removed.

What we store

  • Your account email, so we can send you sign-in links and, if you ask, early-access news about Receivo Pro.
  • The invoices you add: buyer name, amount, acceptance date, Udyam category and any written payment term. They are used only to calculate due dates and interest for you, and only your account can read them.
  • Your profile, if you fill it in: your name, business name and phone number, from Account settings. Each is optional and only your account can read it.
  • Pro interest: when you click “I'm interested”, we record your account email and the date.
  • Usage events: that a page was viewed, an invoice was checked or the Pro offer was seen. These events do not include your buyer's name or invoice amounts.

What we never collect

  • Passwords: Receivo signs you in with an emailed link.
  • Card, UPI or bank details. Receivo Pro is in early access and takes no payment.
  • Your Udyam registration number or GSTIN.

Who else handles it

These service providers process data on our behalf, only to run Receivo:

  • Supabase: stores your account, invoices and Pro interest, and sends sign-in emails.
  • Vercel: hosts the website and processes the requests your browser makes.
  • PostHog: records the usage events above so we can see which parts of Receivo help suppliers.

Cookies and browser storage

  • Sign-in cookies that keep you logged in, set by Supabase.
  • An analytics identifier and, when you arrive from an ad, the ad's click ID and campaign tags.

How we keep it safe

  • Database rules let each account read and change only its own invoices.
  • Sign-in links expire and work once.
  • Requests that save data are rate-limited.

Export or delete your data

Delete any invoice from your dashboard at any time, and delete your whole account, with its invoices and profile, from Account settings. To export your data, email admin@draftlabs.org from your account email and we will act within 30 days.

Grievance contact

Under India's Digital Personal Data Protection Act, 2023, you can ask us to correct, update or erase your personal data, or raise a grievance about how we handle it. Write to our grievance contact at admin@draftlabs.org. If you are not satisfied with our response, you may complain to the Data Protection Board of India.

Changes to this page

When this policy changes, we update the date at the top. Also see the Terms and the Disclaimer.